basis from a Person or entity other than the Issuing Entity, the Grantor Trust or the Servicer before its disclosure to the Information Recipients who is not bound by confidentiality obligations to the Issuing Entity, the Grantor Trust, the Sponsor or the Servicer and is not prohibited from transmitting the information to the Information Recipients, (C) is independently developed by the Information Recipients without the use of the Confidential Information, as shown by the Information Recipients’ files and records or other evidence in the Information Recipients’ possession or (D) the Issuing Entity, the Grantor Trust, the Sponsor or the Servicer provides permission to the applicable Information Recipients to release.
(c) Protection. The Asset Representations Reviewer will take reasonable measures to protect the secrecy of and avoid disclosure and unauthorized use of Confidential Information, including those measures that it takes to protect its own confidential information and not less than a reasonable standard of care. The Asset Representations Reviewer acknowledges that Personally Identifiable Information is also subject to the additional requirements in Section 4.09.
(d) Disclosure. If the Asset Representations Reviewer is required by Applicable Law to disclose part of the Confidential Information, it may disclose the Confidential Information. However, before a required disclosure, the Asset Representations Reviewer, if permitted by Applicable Law, will use its reasonable efforts to provide the Issuing Entity, the Grantor Trust, the Sponsor and the Servicer with notice of the requirement and will cooperate, at the Issuing Entity’s expense, in the Issuing Entity’s, the Grantor Trust’s, the Sponsor’s and the Servicer’s pursuit of a proper protective order or other relief for the disclosure of the Confidential Information. If the Issuing Entity, the Grantor Trust, the Sponsor or the Servicer is unable to obtain a protective order or other proper remedy by the date that the information is required to be disclosed, the Asset Representations Reviewer will disclose only that part of the Confidential Information that it is advised by its legal counsel it is legally required to disclose.
(e) Responsibility for Information Recipients. The Asset Representations Reviewer will be responsible for a breach of this Section 4.08 by its Information Recipients.
(f) Violation. The Asset Representations Reviewer agrees that a violation of this Agreement may cause irreparable injury to the Issuing Entity, the Grantor Trust, the Administrator, the Sponsor and the Servicer and the Issuing Entity, the Grantor Trust, the Administrator, the Sponsor and the Servicer may seek injunctive relief in addition to legal remedies. If an action is initiated by the Issuing Entity, the Grantor Trust, the Administrator, the Sponsor or the Servicer to enforce this Section 4.08, the prevailing party will be reimbursed for its fees and expenses, including reasonable attorney’s fees, incurred for the enforcement.
Section 4.09 Personally Identifiable Information.
(a) Definitions. “Personally Identifiable Information” or “PII” means information in any format about an identifiable individual, including, name, address, phone number, e-mail address, account number(s), identification number(s), any other actual or assigned attribute associated with or identifiable to an individual and any information that when used separately or in combination with other information could identify an individual. “Issuing Entity PII” means PII furnished by the Issuing Entity, the Grantor Trust, the Sponsor, the Servicer or their Affiliates to the Asset Representations Reviewer and PII developed or otherwise collected or acquired by the Asset Representations Reviewer in performing its obligations under this Agreement.
13
CRVNA 2024-P2 Asset
Representations Review Agreement